3.0

Adjusted Signal

3.0

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

15.3K

Stars

Java

Language

672.6K

Lines of Code

5.3K

Files

270

Pattern Hits

2026-10-31

Scan Date

0.03

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 68 finding(s).

Hallucinated Dependency & Supply Chain Risk 13.1/100 · LOW

Are imports declared and package/API names verified? 196 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 49 finding(s).

PR Review Velocity Impact 12.3/100 · LOW

Which changes need focused human review? 270 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 162HIGH 6MEDIUM 1LOW 101

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 270 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators162 hits · 1860 pts

Severity	File	Line	Snippet	Context
CRITICAL	…/server/security/ProjectDefaultsAuthorizationTest.java	77	when(settings.getIssueSetting()).thenReturn(new io.onedev.server.model.support.administration.GlobalIssueSetting());	CODE
CRITICAL	…onedev/server/security/permission/AccessSitesTest.java	14	role.setEditableIssueFields(new io.onedev.server.model.support.role.IncludeIssueFields());	CODE
CRITICAL⚡	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	65	var response = org.eclipse.jetty.http.HttpTester.parseResponse(connector.getResponse(	CODE
CRITICAL⚡	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	75	var response = org.eclipse.jetty.http.HttpTester.parseResponse(connector.getResponse(	CODE
CRITICAL⚡	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	80	var request = org.eclipse.jetty.http.HttpTester.newRequest();	CODE
CRITICAL⚡	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	87	var response = org.eclipse.jetty.http.HttpTester.parseResponse(connector.getResponse(request.generate()));	CODE
CRITICAL	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	164	var response = org.eclipse.jetty.http.HttpTester.parseResponse(	CODE
CRITICAL	…o/onedev/server/jetty/JakartaJettyIntegrationTest.java	174	var response = org.eclipse.jetty.http.HttpTester.parseResponse(	CODE
CRITICAL	…/server/web/page/project/wiki/ProjectWikiPageTest.java	201	org.apache.commons.lang3.reflect.FieldUtils.writeField(page, name, value, true);	CODE
CRITICAL	…page/project/builds/detail/log/BuildStepsPageTest.java	212	var stepExecution = new io.onedev.server.model.support.build.StepExecution();	CODE
CRITICAL	…page/project/builds/detail/log/BuildStepsPageTest.java	251	build.getStepExecutions().put("step-0", new io.onedev.server.model.support.build.StepExecution());	CODE
CRITICAL	…test/java/io/onedev/server/web/util/WikiUtilsTest.java	145	org.junit.jupiter.api.Assertions.assertNull(child.getWikiFolder().getPath());	CODE
CRITICAL	…test/java/io/onedev/server/web/util/WikiUtilsTest.java	148	org.junit.jupiter.api.Assertions.assertNull(child.getWikiFolder().getPath());	CODE
CRITICAL	…test/java/io/onedev/server/web/util/WikiUtilsTest.java	162	role.setEditableIssueFields(new io.onedev.server.model.support.role.NoneIssueFields());	CODE
CRITICAL	…test/java/io/onedev/server/oem/OemIntegrationTest.java	58	io.onedev.server.model.support.WebHook.class.getMethod("getSecret"));	STRING
CRITICAL	…o/onedev/server/persistence/SequenceGeneratorTest.java	288	var issues = new io.onedev.server.service.impl.DefaultIssueService();	CODE
CRITICAL⚡	…o/onedev/server/persistence/SequenceGeneratorTest.java	486	serialization.when(() -> io.onedev.server.data.migration.VersionedXmlDoc.fromBean(any())).thenAnswer(invocat	CODE
CRITICAL⚡	…o/onedev/server/persistence/SequenceGeneratorTest.java	488	var doc = new io.onedev.server.data.migration.VersionedXmlDoc();	CODE
CRITICAL⚡	…o/onedev/server/persistence/SequenceGeneratorTest.java	493	var counters = io.onedev.server.data.migration.VersionedXmlDoc.fromFile(directory.resolve("ProjectNumberCoun	CODE
CRITICAL⚡	…o/onedev/server/persistence/SequenceGeneratorTest.java	497	serialization.verify(() -> io.onedev.server.data.migration.VersionedXmlDoc.fromBean(excluded), never());	CODE
CRITICAL⚡	…o/onedev/server/persistence/SequenceGeneratorTest.java	499	org.apache.commons.io.FileUtils.deleteDirectory(directory.toFile());	CODE
CRITICAL	…/onedev/server/service/impl/DeletionReferenceTest.java	227	var opposite = new io.onedev.server.model.support.issue.LinkSpecOpposite();	CODE
CRITICAL	…va/io/onedev/server/logging/DefaultLogServiceTest.java	105	io.onedev.commons.utils.LockUtils.getReadWriteLock(identity.getLockName());	CODE
CRITICAL	…va/io/onedev/server/logging/DefaultLogServiceTest.java	155	var lock = io.onedev.commons.utils.LockUtils.getReadWriteLock(identity.getLockName()).writeLock();	CODE
CRITICAL	…va/io/onedev/server/logging/DefaultLogServiceTest.java	183	var lock = io.onedev.commons.utils.LockUtils.getReadWriteLock(identity.getLockName());	CODE
CRITICAL	…va/io/onedev/server/logging/DefaultLogServiceTest.java	235	io.onedev.commons.utils.LockUtils.getReadWriteLock(identity.getLockName());	CODE
CRITICAL	…o/onedev/server/git/service/DefaultGitServiceTest.java	98	var exception = org.junit.jupiter.api.Assertions.assertThrows(Exception.class, () -> gitService.commit(project, edits,	CODE
CRITICAL	…er-core/src/main/java/io/onedev/server/CoreModule.java	781	script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.determineBuildFailureInvestigator()"));	CODE
CRITICAL	…er-core/src/main/java/io/onedev/server/CoreModule.java	792	script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.getBuildNumber()"));	CODE
CRITICAL	…er-core/src/main/java/io/onedev/server/CoreModule.java	803	script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.getCurrentUser()"));	CODE
CRITICAL	…/src/main/java/io/onedev/server/buildspec/job/Job.java	422	io.onedev.server.buildspec.job.retrycondition.RetryCondition.parse(this, getRetryCondition());	CODE
CRITICAL	…/server/buildspec/job/trigger/BranchUpdateTrigger.java	118	return io.onedev.server.util.usermatch.UserMatch.parse(getUserMatch()).matches(refUpdated.getUser());	CODE
CRITICAL	…erver/buildspec/job/action/SendNotificationAction.java	36	io.onedev.server.buildspec.job.action.notificationreceiver.NotificationReceiver.parse(getReceivers(), build);	CODE
CRITICAL	…nedev/server/buildspec/job/action/PostBuildAction.java	38	io.onedev.server.buildspec.job.action.condition.ActionCondition.parse(job, condition);	CODE
CRITICAL	…onedev/server/util/oauth/DefaultOAuthTokenService.java	58	new com.nimbusds.oauth2.sdk.token.RefreshToken(refreshTokenValue);	CODE
CRITICAL	…n/java/io/onedev/server/jetty/DefaultJettyService.java	108	org.eclipse.jetty.ee11.websocket.server.config.JettyWebSocketServletContainerInitializer.configure(servletContextHandl	CODE
CRITICAL	…ore/src/main/java/io/onedev/server/web/WebSession.java	53	return (WebSession) org.apache.wicket.protocol.http.WebSession.get();	CODE
CRITICAL	…eb/page/admin/labelmanagement/LabelManagementPage.java	62	return new org.apache.wicket.markup.html.basic.Label(componentId, _T("Labels"));	CODE
CRITICAL	…edev/server/web/page/project/wiki/ProjectWikiPage.java	453	return io.onedev.server.web.page.project.blob.render.BlobRenderContext.getAutosaveKey(	CODE
CRITICAL	…rver/web/page/project/compare/RevisionComparePage.java	550	new io.onedev.server.web.asset.revisioncompare.RevisionCompareCssResourceReference()));	CODE
CRITICAL	…io/onedev/server/web/websocket/WebSocketProcessor.java	78	var threadState = new org.apache.shiro.subject.support.SubjectThreadState(subject);	CODE
CRITICAL	…a/io/onedev/server/web/asset/jqueryui/jquery-ui.min.js	6	!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict"	CODE
CRITICAL	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	8946	return this.cm.display.wrapper.ownerDocument.getSelection()	CODE
CRITICAL	…/io/onedev/server/web/asset/xterm/xterm-addon-webgl.js	1	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE
CRITICAL	…rc/main/java/io/onedev/server/web/asset/xterm/xterm.js	1	!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define	CODE
CRITICAL	…n/java/io/onedev/server/web/asset/marked/marked.min.js	47	`+s.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=r.text):t.push(s);continue}if(e){let r="Infinite loop on byt	CODE
CRITICAL	…in/java/io/onedev/server/web/util/SuggestionUtils.java	430	var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(scopedQuery.getQuery()));	CODE
CRITICAL	…in/java/io/onedev/server/web/util/SuggestionUtils.java	450	var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(scopedQuery.getQ	CODE
CRITICAL	…/onedev/server/web/component/comment/CommentInput.java	90	var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(query));	CODE
CRITICAL	…/onedev/server/web/component/comment/CommentInput.java	102	var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(query));	CODE
CRITICAL	…/server/web/component/markdown/BlobMarkdownEditor.java	206	var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(query));	CODE
CRITICAL	…/server/web/component/markdown/BlobMarkdownEditor.java	218	var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(query));	CODE
CRITICAL	…rver/web/component/stringchoice/StringRadioChoice.java	42	radioGroup.add(new org.apache.wicket.ajax.form.AjaxFormChoiceComponentUpdatingBehavior() {	CODE
CRITICAL	…/main/java/io/onedev/server/web/upload/FileUpload.java	43	throw io.onedev.commons.utils.ExceptionUtils.unchecked(e);	CODE
CRITICAL	…src/main/java/io/onedev/server/ai/BuildSpecSchema.java	77	grammarStream = io.onedev.server.buildspec.job.retrycondition.RetryCondition.class.getResourceAsStre	CODE
CRITICAL	…src/main/java/io/onedev/server/ai/BuildSpecSchema.java	79	grammarStream = io.onedev.server.util.usermatch.UserMatch.class.getResourceAsStream("UserMatch.g4");	CODE
CRITICAL	…ver/model/support/issue/transitionspec/ManualSpec.java	127	io.onedev.server.search.entity.issue.IssueQuery parsedQuery = io.onedev.server.search.entity.issue.IssueQuery.parse(i	CODE
CRITICAL⚡	…l/support/channelnotification/ChannelNotification.java	168	return io.onedev.server.search.entity.issue.IssueQuery.parse(event.getProject(), getIssueQuery(), option, true)	CODE
CRITICAL⚡	…l/support/channelnotification/ChannelNotification.java	175	return io.onedev.server.search.entity.build.BuildQuery.parse(event.getProject(), getBuildQuery(), false, true)	CODE
CRITICAL⚡	…l/support/channelnotification/ChannelNotification.java	182	return io.onedev.server.search.entity.pullrequest.PullRequestQuery.parse(event.getProject(), getPullRequestQuery(),	CODE
102 more matches not shown…

Hyper-Verbose Identifiers43 hits · 44 pts

Severity	File	Line	Snippet	Context
LOW	…icket/core/request/handler/ListenerRequestHandler.java	44	public class ListenerRequestHandler	CODE
LOW	…he/wicket/protocol/ws/api/WebSocketRequestHandler.java	46	public class WebSocketRequestHandler extends AbstractPartialPageRequestHandler implements IWebSocketRequestHandler	CODE
LOW	…icket/request/http/handler/RedirectRequestHandler.java	41	public class RedirectRequestHandler implements IRequestHandler	CODE
LOW	…/io/onedev/server/web/ResourceErrorRequestHandler.java	13	public final class ResourceErrorRequestHandler implements IRequestHandler {	CODE
LOW	…o/onedev/server/web/asset/codemirror/mode/dart/dart.js	135	function tokenInterpolationIdentifier(stream, state) {	CODE
LOW	…ver/web/asset/codemirror/mode/powershell/powershell.js	280	function tokenHereStringInterpolation(stream, state) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/mode/slim/slim.js	265	function startAttributeWrapperMode(state, endQuote, tokenize) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/mode/sass/sass.js	108	function buildInterpolationTokenizer(currentTokenizer) {	CODE
LOW	…/io/onedev/server/web/asset/codemirror/mode/sql/sql.js	226	function hookIdentifierDoublequote(stream) {	CODE
LOW	…va/io/onedev/server/web/asset/codemirror/keymap/vim.js	3363	function findFirstNonWhiteSpaceCharacter(text) {	CODE
LOW	…va/io/onedev/server/web/asset/codemirror/keymap/vim.js	3461	function recordLastCharacterSearch(increment, args) {	CODE
LOW	…va/io/onedev/server/web/asset/codemirror/keymap/vim.js	4653	function findNextFromAndToInclusive(cm, prev, query, repeat, vim) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	1550	function conflictingCollapsedRange(doc, lineNo, from, to, marker) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	1807	function defaultSpecialCharPlaceholder(ch) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	2381	function updateExternalMeasurement(cm, line) {	CODE
LOW⚡	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	2557	function maybeUpdateRectForZooming(measure, rect) {	CODE
LOW⚡	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	2567	function clearLineMeasurementCacheFor(lineView) {	CODE
LOW⚡	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	2576	function clearLineMeasurementCache(cm) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	4323	function maybeUpdateLineNumberWidth(cm) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	4971	function selectionEventCanBeMerged(doc, origin, prev, sel) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	5170	function setSelectionReplaceHistory(doc, sel, options) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	5501	function makeChangeSingleDocInEditor(cm, change, spans) {	CODE
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	5839	function adjustScrollWhenAboveVisible(cm, line, diff) {	CODE
LOW	…nedev/server/web/asset/codemirror/addon/merge/merge.js	789	function collapseIdenticalStretches(mv, margin) {	CODE
LOW	…/web/asset/codemirror/addon/comment/continuecomment.js	93	function continueLineCommentEnabled(cm) {	CODE
LOW	…rver/web/asset/codemirror/addon/search/searchcursor.js	45	function searchRegexpForwardMultiline(doc, regexp, start) {	CODE
LOW	…rver/web/asset/codemirror/addon/search/searchcursor.js	102	function searchRegexpBackwardMultiline(doc, regexp, start) {	CODE
LOW	…dev/server/web/asset/codemirror/addon/search/search.js	220	function getReplacementQueryDialog(cm) {	CODE
LOW	…server/web/asset/codemirror/addon/edit/continuelist.js	67	function incrementRemainingMarkdownListNumbers(cm, pos) {	CODE
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	78	function getSpecialTransitionEndEvent() {	CODE
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	142	getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {	CODE
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	2008	function getOffsetRectRelativeToArbitraryNode(children, parent) {	CODE
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	2060	function getViewportOffsetRectRelativeToArtbitraryNode(element) {	CODE
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	2112	function getFixedPositionOffsetParent(element) {	CODE
LOW	…a/io/onedev/server/web/asset/bootstrap/js/bootstrap.js	79	function getSpecialTransitionEndEvent() {	CODE
LOW	…a/io/onedev/server/web/asset/bootstrap/js/bootstrap.js	143	getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	622	function replaceLongDateFormatTokens(input) {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	2405	function configFromStringAndFormat(config) {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	2986	function isDaylightSavingTimeShifted () {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	3100	function positiveMomentsDifference(base, other) {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	4391	function getSetRelativeTimeRounding (roundingFunction) {	CODE
LOW	…/main/java/io/onedev/server/web/asset/moment/moment.js	4403	function getSetRelativeTimeThreshold (threshold, limit) {	CODE
LOW	…va/io/onedev/server/web/component/markdown/markdown.js	500	function notifyScreenModeLayoutChange() {	CODE

Fake / Example Data34 hits · 34 pts

Severity	File	Line	Snippet	Context
LOW	…edev/server/web/page/project/wiki/ProjectWikiPage.java	391	target.appendJavaScript("$('#" + messageInput.getMarkupId() + "').attr('placeholder', '"	CODE
LOW	…edev/server/web/page/project/wiki/ProjectWikiPage.java	804	input.add(AttributeModifier.replace("placeholder", new LoadableDetachableModel<String>() {	CODE
LOW	…equests/detail/operationdlg/OperationCommentPanel.java	50	return Lists.newArrayList(AttributeModifier.replace("placeholder", "Leave a note"));	CODE
LOW	…uests/detail/activities/PullRequestActivitiesPage.java	266	return Lists.newArrayList(AttributeModifier.replace("placeholder", _T("Leave a comment")));	CODE
LOW	…b/page/project/pullrequests/create/new-pull-request.js	14	$titleInput.data("placeholder", $titleInput.attr("placeholder"));	CODE
LOW	…b/page/project/pullrequests/create/new-pull-request.js	15	$titleInput.removeAttr("placeholder");	CODE
LOW	…b/page/project/pullrequests/create/new-pull-request.js	65	var placeholder = $titleInput.data("placeholder");	CODE
LOW	…b/page/project/pullrequests/create/new-pull-request.js	67	$titleInput.attr("placeholder", placeholder);	CODE
LOW	…ge/project/pullrequests/create/NewPullRequestPage.java	810	titleInput.add(AttributeAppender.append("placeholder", Model.of(_T("Input title here"))));	CODE
LOW	…er/web/page/project/issues/boards/IssueBoardsPage.java	758	queryInput.add(AttributeAppender.append("placeholder", _T("Filter backlog issues")));	CODE
LOW	…er/web/page/project/issues/boards/IssueBoardsPage.java	760	queryInput.add(AttributeAppender.append("placeholder", _T("Filter issues")));	CODE
LOW	…/server/web/page/project/issues/boards/issue-boards.js	45	$card.addClass("placeholder");	CODE
LOW	…/server/web/page/project/issues/boards/issue-boards.js	195	$card.removeData("droppable").removeClass("placeholder");	CODE
LOW	…a/io/onedev/server/web/asset/jqueryui/jquery-ui.min.js	6	!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict"	CODE
LOW	…dev/server/web/asset/codemirror/addon/hint/css-hint.js	20	"placeholder":1, "read-only":1, "read-write":1, "required":1, "root":1,	CODE
LOW	…rver/web/asset/codemirror/addon/display/placeholder.js	12	CodeMirror.defineOption("placeholder", "", function(cm, val, old) {	CODE
LOW	…rver/web/asset/codemirror/addon/display/placeholder.js	45	var placeHolder = cm.getOption("placeholder")	CODE
LOW	…va/io/onedev/server/web/component/markdown/markdown.js	1662	$text.attr("placeholder", onedev.server.util.describeUrl($url.val()));	CODE
LOW	…ev/server/web/component/issue/list/BatchEditPanel.java	265	return Lists.newArrayList(AttributeModifier.replace("placeholder", _T("Leave a comment")));	CODE
LOW	…b/component/issue/activities/IssueActivitiesPanel.java	258	return Lists.newArrayList(AttributeModifier.replace("placeholder", _T("Leave a comment")));	CODE
LOW	…nent/issue/transitionoption/TransitionOptionPanel.java	93	return Lists.newArrayList(AttributeModifier.replace("placeholder", _T("Leave a comment")));	CODE
LOW	…server/web/component/codecomment/CodeCommentPanel.java	558	behaviors.add(AttributeModifier.replace("placeholder", "Leave a note"));	CODE
LOW	…a/io/onedev/server/web/component/select2/Settings.java	90	Json.writeObject(writer, "placeholder", placeholder);	CODE
LOW	…/io/onedev/server/web/component/select2/res/select2.js	1891	this.placeholder = this.normalizePlaceholder(options.get('placeholder'));	CODE
LOW	…/io/onedev/server/web/component/select2/res/select2.js	2262	this.$search[0].setAttribute('placeholder', placeholder.text);	CODE
LOW	…/io/onedev/server/web/component/select2/res/select2.js	2268	this.$search[0].setAttribute('placeholder', '');	CODE
LOW	…/io/onedev/server/web/component/select2/res/select2.js	2306	if (this.$search[0].getAttribute('placeholder') === '') {	CODE
LOW	…/io/onedev/server/web/component/select2/res/select2.js	4360	this.placeholder = this.normalizePlaceholder(options.get('placeholder'));	CODE
LOW	…ev/server/web/component/revision/RevisionSelector.java	160	revField.add(AttributeModifier.replace("placeholder", new LoadableDetachableModel<String>() {	CODE
LOW	…java/io/onedev/server/web/editable/PropertyEditor.java	126	return AttributeModifier.replace("placeholder", new LoadableDetachableModel<String>() {	CODE
LOW	…nedev/server/web/editable/date/DatePropertyEditor.java	42	input.add(AttributeModifier.replace("placeholder", EditableUtils.getDisplayName(propertyGetter)));	CODE
LOW	…nedev/server/web/editable/date/DatePropertyEditor.java	44	input.add(AttributeModifier.replace("placeholder",	CODE
LOW	e2e-test/playwright.config.js	63	initial_email: 'admin@example.com',	CODE
LOW	…edev/server/plugin/report/playwright/test-results.json	69	"initial_email": "admin@example.com",	CODE

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	…n/java/io/onedev/server/buildspec/step/CacheEntry.java	optionally specify directories or files relative to data path to exclude. use '*', '' or '?' for <a href='${docsite}/a	STRING
HIGH	…ev/server/model/support/workspace/spec/CacheEntry.java	optionally specify directories or files relative to data path to exclude. use '*', '' or '?' for <a href='${docsite}/a	STRING
HIGH	…server/model/support/workspace/spec/UserDataEntry.java	optionally specify directories or files relative to data path to exclude. use '*', '' or '?' for <a href='${docsite}/a	STRING
HIGH	…/provisioner/serverdocker/ServerDockerProvisioner.java	specify max number of workspaces this provisioner can handle concurrently. leave empty to set as cpu cores	STRING
HIGH	…rovisioner/serversandbox/ServerSandboxProvisioner.java	specify max number of workspaces this provisioner can handle concurrently. leave empty to set as cpu cores	STRING
HIGH	…ugin/provisioner/serverhost/ServerHostProvisioner.java	specify max number of workspaces this provisioner can handle concurrently. leave empty to set as cpu cores	STRING

Over-Commented Block22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	…nedev/server/jetty/DefaultSessionDataStoreFactory.java	1	//	COMMENT
LOW	…va/io/onedev/server/jetty/ClusterSessionDataStore.java	1	//	COMMENT
LOW	…edev/server/web/asset/codemirror/mode/elixir/elixir.js	361	state.context = state.context.prev	COMMENT
LOW	…edev/server/web/asset/codemirror/mode/erlang/erlang.js	461	}	COMMENT
LOW	…/io/onedev/server/web/asset/codemirror/mode/sas/sas.js	1	// CodeMirror, copyright (c) by Marijn Haverbeke and others	COMMENT
LOW	…va/io/onedev/server/web/asset/codemirror/keymap/vim.js	661	// motions and operators with '.'.	COMMENT
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	361		COMMENT
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	2661	// on a bidi boundary.	COMMENT
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	5621	// returning the number and optionally registering the line as	COMMENT
LOW	…o/onedev/server/web/asset/codemirror/lib/codemirror.js	5861	if (cm) { signalLater(cm, "lineWidgetAdded", cm, widget, typeof handle == "number" ? handle : lineNo(handle)); }	COMMENT
LOW	…web/asset/codemirror/addon/search/match-highlighter.js	1	// CodeMirror, copyright (c) by Marijn Haverbeke and others	COMMENT
LOW	…/onedev/server/web/asset/codemirror/addon/tern/tern.js	1	// CodeMirror, copyright (c) by Marijn Haverbeke and others	COMMENT
LOW	…/onedev/server/web/asset/codemirror/addon/tern/tern.js	21	// multi-file view, switch the view or focus to the named file.	COMMENT
LOW	…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js	2821	// we use `translate3d` to apply the position to the popper we	COMMENT
LOW	…ava/io/onedev/server/web/asset/snapsvg/snap.svg-min.js	1	// Snap.svg 0.5.1	COMMENT
LOW	…/java/io/onedev/server/web/asset/jsjoda/js-joda.min.js	1	//! @version js-joda - 1.11.0	COMMENT
LOW	server-product/helm/values.yaml	21	# onedev.upgrade.stopAllServers -- Stop all OneDev servers in this release before Helm applies a	COMMENT
LOW	server-product/helm/values.yaml	121		COMMENT
LOW	server-product/helm/values.yaml	141	# - configMapRef:	COMMENT
LOW	server-product/helm/values.yaml	221	http: ""	COMMENT
LOW	server-product/helm/values.yaml	241	# and traefik	COMMENT
LOW	server-product/helm/values.yaml	321	accessModes: "ReadWriteOnce"	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	doc/wicket-customizations.md	30	## Dynamic classes and dependency injection	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	server-product/helm/files/stop-servers.py	12		CODE

Redundant / Tautological Comments1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…ev/server/plugin/buildspec/rust/RustJobSuggestion.java	105	"# Set CARGO_HOME to cache folder so that downloaded artifacts can be populated there. Note that we cannot cache '/	CODE

theonedev/onedev

Open-Source Code Quality, Security and Technical Debt Review